Merge pull request #34 from Conjur-Enterprise/redact-request-headers

CNJR-7025: Remove debug logging of authz header
cyberark · Oct 30, 2024 · 494e27c · 494e27c
2 parents 0fa4c6f + 9691821
commit 494e27c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [0.12.6] - 2024-10-30
+
+### Security
+- Remove debug logging of "Authorization" header when processing requests (CNJR-7025)
+
 ## [0.12.5] - 2024-10-23
 
 ### Added

diff --git a/conjurapi/requests.go b/conjurapi/requests.go
@@ -9,7 +9,6 @@ import (
 	"strings"
 
 	"github.com/cyberark/conjur-api-go/conjurapi/authn"
-	"github.com/cyberark/conjur-api-go/conjurapi/logging"
 )
 
 func makeFullId(account, kind, id string) string {
@@ -91,7 +90,6 @@ func (c *Client) SubmitRequest(req *http.Request) (resp *http.Response, err erro
 }
 
 func (c *Client) submitRequestWithCustomAuth(req *http.Request) (resp *http.Response, err error) {
-	logging.ApiLog.Debugf("req: %+v\n", req)
 	resp, err = c.httpClient.Do(req)
 	if err != nil {
 		return